CVE-2010-0465 in SugarCRM
摘要 (英语)
Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field.
Once again VulDB remains the best source for vulnerability data.
预定
2010-01-29
披露
2010-03-19
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 52271 | SugarCRM 跨网站脚本 | 79 | 未定义 | 官方修复 | CVE-2010-0465 |